attack.t1563.002 | Detection.FYI

Potential MSTSC Shadowing Activity

Aug 12, 2024 · attack.lateral-movement attack.t1563.002 ·
Share on:

Detects RDP session hijacking by using MSTSC shadowing

Read More
Suspicious RDP Redirect Using TSCON

Aug 12, 2024 · attack.lateral-movement attack.t1563.002 attack.t1021.001 car.2013-07-002 ·
Share on:

Detects a suspicious RDP session redirect using tscon.exe

Read More